Suspicious
Suspect

bac9ba849e5f0de203e9c11363c15676

Share on LinkedIn
Print
VBScript
MD5: bac9ba849e5f0de203e9c11363c15676
Size: 14.98 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bac9ba849e5f0de203e9c11363c15676
Sha1 72a663a9bb8da8505ab154401fba9e64347dcb52
Sha256 d2308ce690cdcc2a36398b46275c093afb4cfb8360324516f331cde41b5280e3
Sha384 f380a1b9fca97bc59087b7779b55f1429ea645dfd8d09db4c3f6a7f63dcc44c80bd5ba41fb1b3e3ffb77395dc0db48b8
Sha512 9b4a34f179fa42342f4497c3bce3c3d218a71904df877497f4dc6af6b1f3ba54d9d259502318b37abd9fe0083b42e41181140d8b6aa5bc9dd0743b6cab82c7b0
SSDeep 393216:bgtsDjfCwjdVcC6IkI1Jy7Yukl4er794USdwZjffoOKQ:bmsDjHAIkMJy7der+US4fog
TLSH 60E633E16AF16427ED87B4B4D40482613A504AB8437676C8A194E6AF4C3D60BCD3DFFB
PeID
Microsoft Visual C++ 8.0 (DLL)UPolyX 0.3 -> delikon
[Authenticode]_cfd39b7e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xE49F98 size 1432 bytes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙